Resources to explore the two challenges listed in #2:

1. NO "proof of manufacturing" according to a known open source chip design specification
2. NO proof that whatever secrets were encoded into the hardware are not known to anyone

An additional challenge is remote attestation without a trust anchor in a trusted party such as the chip manufacturer (e.g. Intel EPID & DCAP). Thanks to @melynx for raising this question at the Infra Gardens gathering at EthDenver 2024.

Perhaps Keystone's approach is better? (docs)

• Zero trust security model
• Intel: A Zero Trust Approach to Architecting Silicon
• Chip Industry Needs More Trust, Not Zero Trust
• Building a Zero Trust Security Model for Autonomous Systems (See "Zero Trust Applied to Chip Design" section)
• Zero Trust Security In Chip Manufacturing